The patch titled sg_io: fix sg_io_hdr.info corruption in compat code has been added to the -mm tree. Its filename is sg_io-fix-sg_io_hdrinfo-corruption-in-compat-code.patch Before you just go and hit "reply", please: a) Consider who else should be cc'ed b) Prefer to cc a suitable mailing list as well c) Ideally: find the original patch on the mailing list and do a reply-to-all to that, adding suitable additional cc's *** Remember to use Documentation/SubmitChecklist when testing your code *** See http://userweb.kernel.org/~akpm/stuff/added-to-mm.txt to find out what to do about this The current -mm tree may be found at http://userweb.kernel.org/~akpm/mmotm/ ------------------------------------------------------ Subject: sg_io: fix sg_io_hdr.info corruption in compat code From: Alexey Zaytsev <alexey.zaytsev@xxxxxxxxx> sizeof(unsigned (short)) is actually sizeof(function), == 1. Spotted by sparse. Signed-off-by: Alexey Zaytsev <alexey.zaytsev@xxxxxxxxx> Cc: Jens Axboe <jens.axboe@xxxxxxxxxx> Cc: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- fs/compat_ioctl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff -puN fs/compat_ioctl.c~sg_io-fix-sg_io_hdrinfo-corruption-in-compat-code fs/compat_ioctl.c --- a/fs/compat_ioctl.c~sg_io-fix-sg_io_hdrinfo-corruption-in-compat-code +++ a/fs/compat_ioctl.c @@ -784,7 +784,7 @@ static int sg_ioctl_trans(unsigned int f if (copy_in_user(&sgio->status, &sgio32->status, (4 * sizeof(unsigned char)) + - (2 * sizeof(unsigned (short))) + + (2 * sizeof(unsigned short)) + (3 * sizeof(int)))) return -EFAULT; _ Patches currently in -mm which might be from alexey.zaytsev@xxxxxxxxx are sg_io-fix-sg_io_hdrinfo-corruption-in-compat-code.patch -- To unsubscribe from this list: send the line "unsubscribe mm-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html